Re: Duplicate directive HeartbeatStorage

2014-02-21 Thread André Malo
On Thursday 20 February 2014 16:13:01 Eric Covener wrote: > On Thu, Feb 20, 2014 at 10:04 AM, André Malo wrote: > > Anyone? > > > > The doc build tools are confused as well ;-) > > > > nd > > > > On Sunday 16 February 2014 15:58:18 André Malo wrote: > >> Hi there, > >> > >> We do have one duplicat

Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-21 Thread Yann Ylavic
On Fri, Feb 21, 2014 at 12:52 AM, Yann Ylavic wrote: > Maybe what you need is a new ProxyPreserveHost on/off/canon option so > that mod_proxy uses the ServerName to fill in the Host header (hence > the SNI and the "proxy-request-hostname" note checked later by mod_ssl > against the CN). > > I may

Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-21 Thread Pavel Matěja
Dne Pá 21. února 2014 10:08:42, Yann Ylavic napsal(a): > On Fri, Feb 21, 2014 at 12:52 AM, Yann Ylavic wrote: > > Maybe what you need is a new ProxyPreserveHost on/off/canon option so > > that mod_proxy uses the ServerName to fill in the Host header (hence > > the SNI and the "proxy-request-hostna

Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-21 Thread Yann Ylavic
On Fri, Feb 21, 2014 at 10:48 AM, Pavel Matěja wrote: > Dne Pá 21. února 2014 10:08:42, Yann Ylavic napsal(a): >> On Fri, Feb 21, 2014 at 12:52 AM, Yann Ylavic wrote: >> > Maybe what you need is a new ProxyPreserveHost on/off/canon option so >> > that mod_proxy uses the ServerName to fill in the

Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-21 Thread Yann Ylavic
On Thu, Feb 20, 2014 at 7:18 PM, Yann Ylavic wrote: > On Thu, Feb 20, 2014 at 6:28 PM, Pavel Matěja wrote: >> Currently there are two possible scenarios with SSLCheckProxyPeerName On and >> numeric Host/URI: >> 1) you will try to open new connection which will fail the CN check and >> client gets

Fwd: [users@httpd] Performance drop in 2.4.7 versus 2.4.6

2014-02-21 Thread Jeff Trawick
Including dev@httpd.apache.org... -- Forwarded message -- From: Cedric Roijakkers Date: Fri, Feb 21, 2014 at 7:44 AM Subject: [users@httpd] Performance drop in 2.4.7 versus 2.4.6 To: "us...@httpd.apache.org" Hi All, As most of you, we're running Apache in a production set-u

Re: Fwd: [users@httpd] Performance drop in 2.4.7 versus 2.4.6

2014-02-21 Thread Dr Stephen Henson
On 21/02/2014 13:02, Jeff Trawick wrote: > Including dev@httpd.apache.org... > > Is anybody else seeing the same behavior? Looking at the documentation, 2.4.7 > has gained some performance improvements, but I’m seeing something different > on > my end. > Perhaps it's the increased DH parame

Re: [users@httpd] Performance drop in 2.4.7 versus 2.4.6

2014-02-21 Thread Reindl Harald
Am 21.02.2014 14:13, schrieb Dr Stephen Henson: > On 21/02/2014 13:02, Jeff Trawick wrote: >> Including dev@httpd.apache.org... >> >> Is anybody else seeing the same behavior? Looking at the documentation, 2.4.7 >> has gained some performance improvements, but I’m seeing something different >> on

Re: Fwd: [users@httpd] Performance drop in 2.4.7 versus 2.4.6

2014-02-21 Thread Dr Stephen Henson
On 21/02/2014 13:13, Dr Stephen Henson wrote: > On 21/02/2014 13:02, Jeff Trawick wrote: >> Including dev@httpd.apache.org... >> >> Is anybody else seeing the same behavior? Looking at the documentation, 2.4.7 >> has gained some performance improvements, but I’m seeing something different >> on >>

Re: modules calling ap_lingering_close()!!!

2014-02-21 Thread Jeff Trawick
On Thu, Feb 20, 2014 at 6:24 PM, Graham Dumpleton < graham.dumple...@gmail.com> wrote: > > > > On 21 February 2014 02:23, Joe Orton wrote: > >> On Thu, Feb 20, 2014 at 07:52:34AM -0500, Jeff Trawick wrote: >> > WSGI 3.4 daemon mode crashing with httpd 2.4.x... >> > >> > Program received signal SI

Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-21 Thread Pavel Matěja
Dne Pá 21. února 2014 13:55:56, Yann Ylavic napsal(a): > On Thu, Feb 20, 2014 at 7:18 PM, Yann Ylavic wrote: > > On Thu, Feb 20, 2014 at 6:28 PM, Pavel Matěja wrote: > >> Currently there are two possible scenarios with SSLCheckProxyPeerName On > >> and numeric Host/URI: > >> 1) you will try to op

Re: [users@httpd] Performance drop in 2.4.7 versus 2.4.6

2014-02-21 Thread Jim Jagielski
It would be interesting to see if removing SSL entirely made any difference to the delta between 2.4.6 and 2.4.7... On Feb 21, 2014, at 8:02 AM, Jeff Trawick wrote: > Including dev@httpd.apache.org... > > -- Forwarded message -- > From: Cedric Roijakkers > Date: Fri, Feb 21, 20

Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-21 Thread Pavel Matěja
Dne Pá 21. února 2014 15:13:25, Pavel Matěja napsal(a): > Dne Pá 21. února 2014 13:55:56, Yann Ylavic napsal(a): > > On Thu, Feb 20, 2014 at 7:18 PM, Yann Ylavic wrote: > > > On Thu, Feb 20, 2014 at 6:28 PM, Pavel Matěja wrote: > > >> Currently there are two possible scenarios with SSLChe

Re: modules calling ap_lingering_close()!!!

2014-02-21 Thread Joe Orton
On Thu, Feb 20, 2014 at 12:24:23PM -0500, Jeff Trawick wrote: > BTW, do you know if there's a known collection of patches for 2.4 support > or for other critical fixes? This shows what we have in Fedora, FWIW: http://pkgs.fedoraproject.org/cgit/mod_wsgi.git/tree/ ... all of which are in the upst

Re: modules calling ap_lingering_close()!!!

2014-02-21 Thread Joe Orton
On Fri, Feb 21, 2014 at 10:24:25AM +1100, Graham Dumpleton wrote: > Crap. I thought those httpd 2.4 fixes were already in mod_wsgi 3.4. > > Another reason I have to get off my backside and release an updated > version. Has been too long. That would be very useful! > And yes mod_wsgi does lots of

what to expect from fcgid

2014-02-21 Thread Антон Панков
Dear All. Please, explain what functionality now in trunk and what plans for mod_fcgid. I miss FastCGIExternalServer feature. The problem is to allow different site parts to be processed by different FastCGI servers (frankly speaking, by different php-fpm pools). Also,t

mod_fastcgi and Apache 2.4 (Re: what to expect from fcgid)

2014-02-21 Thread Mikhail T.
On 21.02.2014 11:56, ? ?? wrote: > But mod_fastcgi doesn't compile with Apache 2.4. This is entirely possible, actually -- and has been for a while. Pathes exist and are maintained: https://github.com/ByteInternet/libapache-mod-fastcgi Yours, -mi

Re: mod_fastcgi and Apache 2.4 (Re: what to expect from fcgid)

2014-02-21 Thread Anthony Pankov
Thank you for suggestion. But this packet does not install "from box" in FreeBSD. It does not install via "apxs -cia" also. Besides that there is a patch for mod_fastcgi in FreeBSD ports that doesn't seem trivial. > On 21.02.2014 11:56, Антон Панков wrote: > > But mod_fastcg

Re: mod_fastcgi and Apache 2.4 (Re: what to expect from fcgid)

2014-02-21 Thread Mikhail T.
On 21.02.2014 13:59, Anthony Pankov wrote: > Thank you for suggestion. > But this packet does not install "from box" in > FreeBSD. It does not install via "apxs -cia" also. Besides that > there is a patch for mod_fastcgi in FreeBSD ports that doesn't seem > trivial. Unless apa...@freebsd.

mod_rewrite/proxy UDS issues

2014-02-21 Thread Yann Ylavic
Helo, I'm facing some issue(s).while validating mod_rewrite +proxy with uds. Here is my simple conf : RewriteEngine on RewriteRule "^/(.*)$" "unix:/tmp/backend.sock|http://localhost/$1"; [P,NE] http://localhost"; disablereuse=off> First, the (pseudo-)scheme "unix:" is unknown

Re: what to expect from fcgid

2014-02-21 Thread Kean Johnston
On 2/21/2014 6:56 PM, Антон Панков wrote: Dear All. Please, explain what functionality now in trunk and what plans for mod_fcgid. I miss FastCGIExternalServer feature. I am in the final stages of testing a new FastCGI module, written for 2.4 (although it MAY work on 2.2) called mod_extfcgi

Re: Segmentation faults when SSLProxyCheckPeerName On

2014-02-21 Thread Kaspar Brand
On 18.02.2014 15:53, Pavel Matěja wrote: > Hi, > since we've enabled SSLProxyCheckPeerName our reverserse proxy I can see > AH00052: child pid 5711 exit signal Segmentation fault (11) > in our logs during Nessus scans. > > Backend server has several X509v3 Subject Alternative Names and Nessus send

Re: mod_ssl openssl ./configure particularity

2014-02-21 Thread Kaspar Brand
On 20.02.2014 04:18, William A. Rowe Jr. wrote: > Can anyone offer background as to why httpd 2.4 branch ./configure likes > > checking for OpenSSL... checking for user-provided OpenSSL base > directory... /usr/local/ssl adding "-I/usr/local/ssl/include" to > CPPFLAGS setting MOD_CFLAGS to "-I/usr